6ff714465fe539943b364f568123b7f2_JaffaCakes118 | Triage

Sharing

General

Target

6ff714465fe539943b364f568123b7f2_JaffaCakes118
Size

325KB
MD5

6ff714465fe539943b364f568123b7f2
SHA1

b1396c18f6e9faacda650d01ccd8aa4e0ffcf32d
SHA256

c030b287ad7126b2183778f72e8566a4e4b57a0890cb73b7a250109316d6bd53
SHA512

b6a069991d2ec8f303683aca46fa221e363a4ba2f02297f921abe63e63822ead94b3b968b80de0c7ac19fd3a57286d8afe1604bc9a820a0404bacd2289e43f1c
SSDEEP

6144:AoxCsE1rfyj1YkHs5P1550tRPmBNCtD84si8CELz42fNNLDx:AGo63Mz/qBmD0D84sTLz42fLDx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff714465fe539943b364f568123b7f2_JaffaCakes118

Files

6ff714465fe539943b364f568123b7f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87e4e6171839a8d541efe229fca51cf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
LoadLibraryW
GetModuleHandleW
GetCurrentThreadId
GetStartupInfoW
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 145KB - Virtual size: 570KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ